Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/39614f517bde3fd9e357911289eb5765adf58126.roa
File:                     39614f517bde3fd9e357911289eb5765adf58126.roa (raw, json)
Hash identifier:          KJs7SIx2cy7xRJjozE4/pjiJSoMOgCcFw4XMvwcfLs8=
Subject key identifier:   23:82:08:0D:E1:79:72:CD:4A:4A:1E:47:94:91:43:AB:C6:0C:DB:98
Certificate issuer:       /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial:       08D685
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/39614f517bde3fd9e357911289eb5765adf58126.roa
Signing time:             Wed 30 Aug 2023 17:31:45 +0000
ROA not before:           Tue 29 Aug 2023 17:31:45 +0000
ROA not after:            Sat 30 Aug 2025 17:31:45 +0000
asID:                     8163
IP address blocks:        190.1.128.0/18 maxlen: 24
                          201.220.64.0/19 maxlen: 24
                          190.182.0.0/17 maxlen: 24
                          200.89.96.0/19 maxlen: 24
                          186.121.0.0/17 maxlen: 24
                          2803:fd00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579205 (0x8d685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
        Validity
            Not Before: Aug 29 17:31:45 2023 GMT
            Not After : Aug 30 17:31:45 2025 GMT
        Subject: CN=39614f517bde3fd9e357911289eb5765adf58126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:56:bb:dd:88:37:07:c7:19:de:e0:9d:27:
                    96:d8:d3:6c:6e:1a:c7:95:6f:73:42:37:e0:4f:be:
                    61:f2:35:25:14:e1:f3:df:87:14:6f:00:33:da:6b:
                    18:fa:78:93:c6:5b:fc:f7:b9:30:31:5a:f5:33:e4:
                    63:e4:e6:a3:d1:92:15:e0:70:a7:3c:70:2e:76:2f:
                    99:22:99:c0:e9:c3:af:d2:67:dc:de:c7:3f:ff:55:
                    93:9d:37:ec:93:fc:b6:36:4f:84:2f:1d:57:1e:7f:
                    e3:0a:b1:f9:1d:24:2e:2a:1f:5e:53:0e:c5:7d:f0:
                    75:43:fa:b4:8f:80:e5:d3:f7:89:68:b9:30:da:b2:
                    83:3d:82:f8:23:98:96:8d:9d:0b:c1:53:41:6c:14:
                    c8:d5:20:db:bc:d8:a1:b9:e8:98:d9:48:f8:8a:c5:
                    39:cf:e4:d8:06:6e:c6:55:4a:5d:98:11:ca:1e:45:
                    46:5b:78:f9:dc:ed:20:de:a4:a0:bb:ca:4b:76:f7:
                    b3:cb:df:09:a1:9b:53:b5:bb:ac:7b:e9:44:73:d0:
                    61:d5:2b:60:10:ab:ec:76:56:0a:91:ce:0c:d3:e1:
                    81:26:e0:49:62:9c:67:4a:92:83:db:45:6a:44:f1:
                    2e:fb:cd:c4:f3:26:f7:bb:a6:ef:29:c6:6a:a8:59:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:82:08:0D:E1:79:72:CD:4A:4A:1E:47:94:91:43:AB:C6:0C:DB:98
            X509v3 Authority Key Identifier:
                keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/39614f517bde3fd9e357911289eb5765adf58126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.0.0/17
                  190.1.128.0/18
                  190.182.0.0/17
                  200.89.96.0/19
                  201.220.64.0/19
                IPv6:
                  2803:fd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:b2:2e:c4:8c:59:50:66:15:f6:e3:6b:70:f4:91:25:c9:d3:
         f6:83:92:20:46:8f:dd:80:bd:c5:2e:eb:b8:b1:8d:7c:5b:96:
         ca:43:99:03:c3:e0:f4:4c:3d:4a:c5:69:bd:83:db:6f:c1:a0:
         1d:86:f9:99:b7:4d:07:d3:9b:81:6a:65:f5:1d:7b:11:d5:a8:
         4f:02:fb:25:80:9e:f4:96:dd:39:d4:03:51:9d:b1:5a:7c:10:
         b9:94:27:f4:db:0c:d0:63:09:57:01:01:28:4e:ea:a0:c1:5b:
         91:04:29:53:a2:3d:85:67:d3:fa:59:6f:c3:60:bd:ea:d0:77:
         1f:c9:04:2f:9f:73:8a:b4:a3:e0:70:e7:9c:d1:75:fb:ba:68:
         b9:87:42:12:0a:b1:7d:fa:1c:e4:c1:4b:50:18:1d:7f:71:fa:
         a1:2d:4e:97:48:14:9e:d0:95:b7:90:73:14:7a:b9:b0:24:14:
         89:50:40:0e:01:c6:04:bb:a4:08:4d:a8:a8:56:b8:cf:ba:3a:
         b2:c9:a9:a2:14:32:20:67:ab:aa:1d:c3:f1:80:da:59:24:75:
         34:83:9d:18:cc:1f:81:05:c8:1f:e4:cf:09:ad:9b:b4:50:0b:
         c8:44:8d:d0:a5:83:4b:45:2f:94:81:d5:da:63:b9:fa:b0:10:
         81:4e:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----